Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Cisco Releases Security Updates for Secure Firewall ASA and FTD

Successful exploitation of CVE-2026-76418 could allow an unauthenticated remote attacker to reload affected devices, resulting in denial of service

Threat ID:
CC-4883
Threat Severity:
Medium
Published:
29 October 2026 1:33 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Successful exploitation of CVE-2026-76418 could allow an unauthenticated remote attacker to reload affected devices, resulting in denial of service

Threat details

Exploitation of CVE-2026-76418

Cisco states that it is aware of active exploitation of CVE-2026-76418 in the wild. The NHS England National CSOC assesses further exploitation as highly likely.

Introduction

Cisco has released a security advisory to address a high severity vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software.

  • CVE-2026-76418 - 'Unchecked Return Value to NULL Pointer Dereference' vulnerability - CVSS v3.1 Score: 8.6

Remediation advice

Affected organisations are encouraged to review Cisco Security Advisory cisco-sa-asaftd-tunnel-dos-s6mgkb75 and apply the relevant update as soon as possible.

Last edited: 29 October 2026 1:33 pm